Re: Directory listing vulnerability in Tomcat 3.2

I just downloaded and installed Tomcat 3.2.4 and the problem in on this version too. I think that if you a 404 error page defined, this problem doesn't happen. Anyway, I think it's a vulnerability. On Mon Dec 3 11:16:34 2001, Renato [EMAIL PROTECTED] escreveu : Hi all, Recently I saw

Connection reset by peer

) After a while Tomcat starts failing to respond till it hangs completely. I've seen Sun's JVM release and already set up the 'work around' parameters for Linux. Any other hint ? Thanks Renato. -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL

Re: Connection reset by peer

not too sure, but I guess your tomcat didn't hang due to this reason. There must be some other problem with your environment as well. Regards, Ali. - Original Message - From: Renato [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Monday, December 10, 2001 5:26 PM

Tomcat 3.3 and JSP/HTML pages with accents

Hi all, I'm trying to upgrade from Tomcat 3.2 to Tomcat 3.3 and I have some jsp pages that have caracteres with accents. With tomcat 3.3 it outputs 'garbage' to the browser. Example: ... tdI have accents - áéíóú âêîôû/td ... What am I missing ? Thanks. -- To unsubscribe, e-mail:

Re: Tomcat 3.3 deployment - last minute problem

the charset of Linux ? ( I'll STW of course.. :)) ) Thanks for the promptness ! On Fri, 14 Dec 2001 08:48:31 -0800 (PST), [EMAIL PROTECTED] escreveu : On Fri, 14 Dec 2001, Renato wrote: *** HTML pages with latin characters don't display correctly on Linux *** ( JSP file with: ) Ex: páéíóú/p

Tomcat 3.3 deployment - last minute problem

maybe a problem with the locale variables on my Linux, which I don't quite understand ( tried LC_ALL, LANG, LC_CTYPE and it didn't work ) or Tomcat itself. Any hints ? Thanks Renato - Brazil -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL

Re: Tomcat 3.3 deployment - last minute problem

Hi Bill, Thanks for the help. I found out the problem. It was jikes. I was using jikes in the JspInterceptor and somewhat it wasn't working. Now, I will upgrade all my user base to Tomcat 3.3 :)) Renato. On Tue, 18 Dec 2001 14:29:24 -0800, Bill Barker [EMAIL PROTECTED] escreveu

RE: cvs commit: jakarta-tomcat/src/share/org/apache/tomcat/util J avaGeneratorTool.java

Is Tomcat 3.3 affected by this ? On Wed, 19 Dec 2001 08:10:52 -0500, Larry Isaacs [EMAIL PROTECTED] escreveu : I can't get code involving index and length right without a lot of trial and error. Fortunately the internal test revealed this one. Larry -Original Message-

Difference in the Request class between Tomcat 3.2 and Tomcat 3.3

again Renato - Brazil. -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]

Re: Difference in the Request class between Tomcat 3.2 and Tomcat 3.3

Just found it... they change names... ( silly me :)) ) On Wed Dec 19 11:54:57 2001, Renato [EMAIL PROTECTED] escreveu : Hi all, What happened to methods getRemoteAddr, getServerName, getServletPath in the Request class for Tomcat 3.3 ? I had an Interceptor written for Tomcat 3.2

Tomcat 4.0.2-b2 + JSSE + Security Manager

not available (...) The JSSE libraries are on ${java.home}/jre/lib/ext and this path has permission to all. I also tried on Tomcat 3.3 and the servlet works with or without the security manager. Any hint ? Thanks Renato - Brazil -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional

Interceptor in Tomcat 4.0 ???

Hi all, I have an Interceptor I wrote for Tomcat 3.3 and I want to migrate to Catalina. I think the concept know is a Valve, right ? Is there a guideline how to migrate an interceptor ? Thanks Renato - Brazil. -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e

Re: Fwd: Re: Tomcat 4.0.2-b2 + JSSE + Security Manager

think I'm able to do something further. Thanks for the help ! Renato - Brazil On Wed, 23 Jan 2002 20:17:49 -0600, Glenn Nielsen [EMAIL PROTECTED] escreveu : Oh, one more thing you can try. Configure the following permission in your catalina.policy. permission

Tomcat 4 step back ?

Hi all, Recently I went through a migration process from Tomcat 3.2 to Tomcat 4.0 trying 3.3. I've seen a huge difference in the number of threads started in each implementation when someone have a lot of Virtual Hosts defined. ( the following situation is right after starting Tomcat with

Strange Tomcat 3.3 error

) at org.apache.tomcat.util.IntrospectionUtils.execute(Unknown Source) at org.apache.tomcat.startup.Main.execute(Unknown Source) at org.apache.tomcat.startup.Main.main(Unknown Source) It works fine, but it take ages to start. What can this be ? Thanks Renato - Brazil -- To unsubscribe, e-mail: mailto:[EMAIL

MBeans dev

of material about Message Beans in J2EE but I imagine these MBeans for Tomcat are somehow different, aren't they ? ) Thanks for the patience Renato. -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]

Re: [4.0.3] Beta 1 release

I guess security issues have to be always a priority. I think we can live with 4.0.2a ( there is a Tomcat 3.3a and I imagine people are used to it ) and a 4.0.3-B1. Remy Maucherat [EMAIL PROTECTED] wrote: Hi, I'd like to propose to release Tomcat 4.0.3 Beta 1 at the end of this week (03/01

Manager application: diferences between 4.0.3 and 4.0.4-b1

been started I can test any patch. Thanks Renato - Brazil. - Do You Yahoo!? Yahoo! Sports - live college hoops coverage

Re: Manager application: diferences between 4.0.3 and 4.0.4-b1

code that releases DirContext in StandarContext ? Thanks PS. How can I disable Webappclassloader from keep checking every minute for changes in my webapp ? ( it's messes up with debugging :)) ). Renato [EMAIL PROTECTED] wrote: Hi, I have an application that uses the rowset.jar from Sun. When I

Manager application working again in 4.0.4-B1. Please evaluate patch

Thanks Renato - Brazil - Do You Yahoo!? Yahoo! Movies - coverage of the 74th Academy Awards®

Re: [VOTE] [4.1.24] Stability rating

I have a machine on production with this version already. Everything seems fine up to now. Remy Maucherat [EMAIL PROTECTED] wrote: [ ] Alpha [ ] Beta [x] Stable (GA) Remy - To unsubscribe, e-mail: [EMAIL PROTECTED] For

Re: [4.0.4] Binaries available

Is there possibility the patch for bug #9715 could make it to 4.0.5-b1 ? I found it very very useful... Thanks ! Renato - Brazil Remy Maucherat [EMAIL PROTECTED] wrote: The Tomcat 4.0.4 binaries are now available. Both the tester and Watchdog passed successfully on the build. It also

[PATCH] Backporting bug in StandardSession.java to 4.0.x

(this); + manager = null; + } Since 4.1.x is not even beta yet, isn't it wise to backport all the bug fixes to the 4.0.x branch ? Thanks Renato. - Do You Yahoo!? Sign-up for Video Highlights of 2002 FIFA World Cup

Problem with individual jars and Security Manager in TC4.1.10

Hi all, I'm trying to upgrade a production installation running TC 4.0.4 to lastest 4.1.10. So far, so good ( still using Jasper 1 ), but I think there is a problem with the configuration of catalina.policy for individual jar files. On catalina.policy it says to use: grant codeBase

JAASRealm doc ?

Hi all, We are trying to integrate Tomcat 4.1 and JBoss securely through JAASRealm, but I cannot find any doc about how to use it ? Could somebody that is more familiar with it, add some doc ? Thanks Renato. - Do You Yahoo!? Yahoo! Finance - Get real

Tomcat authenticating in JBoss ?

We have an application that must be run separately in two servers: the WebApp on Tomcat ( 4.1 ) and the J2EE App on JBoss. Each Webapp can access only the EJBs within a specific ear. In order to do this we are thinking in a way to authenticate each webapp in JBoss. We are thinking of using

accessClassInPackage.org.apache.catalina.realm permission

the securityfilter.jar library I'm using Tomcat 4.1.12 with SecurityManager. Is is safe to grant this permission ? Thanks Renato - Do you Yahoo!? HotJobs - Search new jobs daily now

Re: [VOTE] 4.1.26 stability rating

[ ] Alpha [ ] Beta [X] Stable So far, it's running ok. Renato __ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com - To unsubscribe, e

RE: [Patch] File descriptor leak in ManagerBase - please advise.

I don't like as much because it closes the stream before the readLong method is invoked on it. Yoav Shapira Millennium Research Informatics -Original Message- From: Renato [mailto:[EMAIL PROTECTED] Sent: Monday, August 30, 2004 1:43 PM To: [EMAIL PROTECTED] Subject: [Patch

Re: cvs commit: jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/session ManagerBase.java

Hi Yoav, I just give it try and it didn't work. I still see thousands of opened '/dev/urandom' with lsof: java8457 webserver 19r CHR 1,9 39427 /dev/urandom java8457 webserver 20r CHR 1,9 39427 /dev/urandom java8457 webserver 21r CHR

RE: Tomcat 3.2.2 and Error page 404 ( not solved )

is a very common one. Thanks all Renato. Marc Saegesser [EMAIL PROTECTED] wrote: This has already been fixed in 3.2.3-dev. Try the latest nightly build. -Original Message- From: David Rees [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 04, 2001 3:14 PM To: [EMAIL PROTECTED] Subject: Re

Re: cvs commit: jakarta-tomcat/src/share/org/apache/tomcat/core ContextManager.java

Hi Larry, Please, ignore my last message.With this change, it fixed the problem. Thanks a lot !! Renato. [EMAIL PROTECTED] wrote: larryi 01/07/06 11:40:08Modified: src/share/org/apache/tomcat/core Tag: tomcat_32ContextManager.javaLog:Fix recursive error handling if web.xml maps error code 404

Problem with ThreadPool.java

Renato. - Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/

JAXP 1.1 and Tomcat 3.2.3

) at org.apache.tools.ant.Main.runBuild(Main.java:403) at org.apache.tools.ant.Main.main(Main.java:149) Total time: 0 seconds java.lang.ClassNotFoundException: org.apache.crimson.jaxp.SAXParserFactoryImpl Is Tomcat 3.2.3 compatible with JAXP 1.1 ?? Thanks Renato - Brazil

Re: DO NOT REPLY [Bug 6598] - The Implicate mapping of TLDs in packaged libraries no longer works

Pardon me... Where should we create the temp directory ? [EMAIL PROTECTED] wrote: DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE.

Catalina with SecurityManager is possibly broken.

with Tomcat 3.3 ). If you want me to test some patches let me know !! Renato - Brazil - Do You Yahoo!? Yahoo! Sports - Coverage of the 2002 Olympic Games

Re: DO NOT REPLY [Bug 6660] - Catalina with SecurityManager is possibly broken.

What if I want my users to put any *.jar files on /lib ( which will be controled by the policy anyway... ) ? Do I need to configure each of them on catalina.policy and then restart Tomcat ? ( this is not good... :(( ). [EMAIL PROTECTED] wrote: DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST

Re: DO NOT REPLY [Bug 6660] - Catalina with SecurityManager is possibly broken.

the bug report because if we can't grant permissions on all jars files on the /lib it will a maintanance hell for wenhosting... Thanks for the patience ! Renato. Remy Maucherat [EMAIL PROTECTED] wrote: What if I want my users to put any *.jar files on /lib ( which will be controled by the policy

Re: DO NOT REPLY [Bug 6660] - Catalina with SecurityManager is possibly broken.

If you can point me out where in Catalina code I could take a look, I'll appreciate. Also if you need a beta-tester for your application, you count on me. Thanks ! Glenn Nielsen [EMAIL PROTECTED] wrote: I also administer Tomcat for web hosting purposes and am aware of the problems

Re: [PROPOSAL] - Tocmat 4, implement new Catalina SecurityManager Policy class

It's a great proposal. Just one thing, Read/Write File permissions and the directory tree it applies will be included in the Servlet permission right ? Glenn Nielsen [EMAIL PROTECTED] wrote: Due to recent questions about the SecurityManager implementation in Tomcat 4 I decided to post my